Use RELRO hardening on all binaries

This commit is contained in:
Michal Schorm 2019-08-19 12:29:12 +02:00
parent 7c23db2b2b
commit adb69c78bc

View File

@ -67,7 +67,7 @@
Name: community-mysql Name: community-mysql
Version: 8.0.17 Version: 8.0.17
Release: 1%{?with_debug:.debug}%{?dist} Release: 2%{?with_debug:.debug}%{?dist}
Summary: MySQL client programs and shared libraries Summary: MySQL client programs and shared libraries
URL: http://www.mysql.com URL: http://www.mysql.com
@ -386,6 +386,8 @@ cp %{SOURCE2} %{SOURCE3} %{SOURCE10} %{SOURCE11} %{SOURCE12} \
%{SOURCE14} %{SOURCE15} %{SOURCE17} %{SOURCE18} %{SOURCE31} scripts %{SOURCE14} %{SOURCE15} %{SOURCE17} %{SOURCE18} %{SOURCE31} scripts
%build %build
%{set_build_flags}
# fail quickly and obviously if user tries to build as root # fail quickly and obviously if user tries to build as root
%if %runselftest %if %runselftest
if [ x"$(id -u)" = "x0" ]; then if [ x"$(id -u)" = "x0" ]; then
@ -445,10 +447,13 @@ cmake .. \
-DREPRODUCIBLE_BUILD=OFF \ -DREPRODUCIBLE_BUILD=OFF \
-DCMAKE_C_FLAGS="%{optflags}%{?with_debug: -fno-strict-overflow -Wno-unused-result -Wno-unused-function -Wno-unused-but-set-variable}" \ -DCMAKE_C_FLAGS="%{optflags}%{?with_debug: -fno-strict-overflow -Wno-unused-result -Wno-unused-function -Wno-unused-but-set-variable}" \
-DCMAKE_CXX_FLAGS="%{optflags}%{?with_debug: -fno-strict-overflow -Wno-unused-result -Wno-unused-function -Wno-unused-but-set-variable}" \ -DCMAKE_CXX_FLAGS="%{optflags}%{?with_debug: -fno-strict-overflow -Wno-unused-result -Wno-unused-function -Wno-unused-but-set-variable}" \
-DCMAKE_EXE_LINKER_FLAGS="-pie %{build_ldflags}" \
%{?with_debug: -DWITH_DEBUG=1} \ %{?with_debug: -DWITH_DEBUG=1} \
%{?with_debug: -DMYSQL_MAINTAINER_MODE=0} \ %{?with_debug: -DMYSQL_MAINTAINER_MODE=0} \
-DTMPDIR=/var/tmp \ -DTMPDIR=/var/tmp \
-DWITH_MYSQLD_LDFLAGS="-pie -Wl,-z,relro,-z,now" -DWITH_MYSQLD_LDFLAGS="%{build_ldflags}" \
-DCMAKE_C_LINK_FLAGS="%{build_ldflags}" \
-DCMAKE_CXX_LINK_FLAGS"%{build_ldflags}"
cmake .. -LAH cmake .. -LAH
@ -789,6 +794,9 @@ fi
%endif %endif
%changelog %changelog
* Mon Aug 19 2019 Michal Schorm <mschorm@redhat.com> - 8.0.17-2
- Use RELRO hardening on all binaries
* Wed Jul 31 2019 Lars Tangvald <lars.tangvald@oracle.com> - 8.0.17-1 * Wed Jul 31 2019 Lars Tangvald <lars.tangvald@oracle.com> - 8.0.17-1
- Update to MySQL 8.0.17 - Update to MySQL 8.0.17